UseCase "Easy System Cloning (DSESC) Backup"

Metadata In this context… What links here? [edit] Keywords/Contexts Duplicity · Encrypted · Backup · GnuPG · DSESC  Domain Terms Annotations {{#compound_query:Component 947746Property "-Has subobject" has a restricted application area and cannot be used as annotation property by a user.UseCaseMotivation;?HasDirection;?IsMotivating;?IsMotivatedBy;?HasReasoning Property "-Has subobject" has a restricted application area and cannot be used as annotation property by a user.UseCase "Easy System Cloning (DSESC) Backup";?HasDirection;?IsMotivating;?IsMotivatedBy;?HasReasoning Property "-Has subobject" has a restricted application area and cannot be used as annotation property by a user.UseCase "Easy System Cloning (DSESC) Backup";?HasDirection;?IsMotivating;?IsMotivatedBy;?HasReasoning name=MotivationsDeclaredOnThisPageResultItem|link=none}} Motivations [edit] [edit] Main Page ‎ (← links) Domain "SMWCKMain:Factory" ‎ (← links) DSKIMRecipe ‎ (← links) Duplicity ‎ (← links) GnuPG ‎ (← links) Backup ‎ (← links) Encrypted ‎ (← links) Reified Relation 100004 ‎ (← links) Community:Use Cases ‎ (← links) Category:Property ‎ (← links) Property:HasGitHubRepository ‎ (← links) Concept "Easy System Cloning (DSESC)" ‎ (← links) DSESC ‎ (← links) Dataspects ‎ (← links) UseCase "Restore/clone a system (snapshot)" ‎ (← links)

Content

HasGitHubRepository "HasGitHubRepository</br>" contains a listed "LF" character as part of the property label and has therefore been classified as invalid. IsRelevantFor UseCase "Develop a MediaWiki extension"

Understanding

For background and reasoning see https://dataspects.com/easy-system-cloning and for a conceptual overview see Concept "Easy System Cloning (DSESC)".

• You can run multiple backup configurations which use different sources, destinations, options and encryptions keys.
• For each backup configuration you have to choose a BACKUP_CONFIGURATION_NAME.
• A specific BACKUP_CONFIGURATION_NAME backs up ONE specific source to ONE specific destination.

Setup

The server running a MediaWiki instance will need the following components installed:

• the Docker platform (see https://github.com/dataspects/install-docker/blob/master/tasks/main.yml)
• the Docker container creating the snapshots: (docker pull https://hub.docker.com/r/dataspects/duplicity)
• the user who runs the Docker container creating the snapshots (see https://github.com/dataspects/install-os-user/blob/master/tasks/main.yml); the user needs a GnuPG key pair (see Recipe "How to create, configure, export and import GnuPG keys")

About configurative data and data locations the following information must be obtained or decisions made:

• <username>, <user_gnupg_key_passphrase> and <user_gnupg_key_id>
• <mediawiki_instance_root_urn>
• <duplicity_target_data_location> (Depending on your choice of data location, you might need to install necessary packages providing interfaces, e.g. for Amazon Web Services S3 python-boto.)
• <duplicity_policies>, see Duplicity options
• <duplicity_log_file>
• mediawiki_instance_database_ro_credentials
• <docker_container>

Based on this data the following script is run ad-hoc or scheduled (e.g. https://help.ubuntu.com/community/CronHowto):

#!/bin/bash

mysqldump \
--password=mariadb_user_password \
--user=mariadb_user_username \
--host=mariadb_host \
--complete-insert \
--add-drop-database \
--add-drop-table \
--compact \
--create-options \
--no-create-db \
--result-file=<mediawiki_instance_root_urn>/dump.sql \
mariadb_database_name

docker run \
  --rm \
  --user=`id -u <username>` \
  -e PASSPHRASE='<user_gnupg_key_passphrase>' \
  -v $PWD/.cache:/home/duplicity/.cache/duplicity \
  -v $PWD/.gnupg:/home/duplicity/.gnupg \
  -v <mediawiki_instance_root_urn>:/source/ \
  -v <duplicity_target_data_location>:/target/:rw \
  <docker_container> \
  duplicity \
  --allow-source-mismatch \
  --verbosity 9 \
  <duplicity_policies> \
  --encrypt-key <user_gnupg_key_id> \
  /source/ file:///target/ \
  >> <duplicity_log_file>